Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: ndS5HJXujSo6iYBVdgL1Zu4MFpJ5lgVbBswjs7Kh8uA=
Subject key identifier: D9:29:C8:4F:47:30:81:F4:4F:46:CE:8D:D1:39:66:0A:D2:B9:6F:A0
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 01977150FFA7429C3DD37C2610DA180A51BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 159D
Signing time: Sun 15 Jun 2025 02:00:22 +0000
Manifest this update: Sun 15 Jun 2025 02:00:22 +0000
Manifest next update: Mon 16 Jun 2025 02:00:22 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=)
3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=)
4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: FJgT6M+NzyGoN7qUskR6g5XTHCAWXgRUQ2v2xS3/hZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:ff:a7:42:9c:3d:d3:7c:26:10:da:18:0a:51:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Jun 15 02:00:22 2025 GMT
Not After : Jun 16 02:00:22 2025 GMT
Subject: CN=d929c84f473081f44f46ce8dd139660ad2b96fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:c9:e5:e5:15:25:cc:46:8a:03:58:90:a8:
f0:60:ae:2a:ab:ae:ba:b0:06:64:9b:1e:11:83:c8:
d1:77:b0:80:81:51:55:d9:a5:a1:dd:d7:f9:83:bc:
b6:c2:a9:fb:8e:83:90:5d:69:67:8b:c9:92:ce:3d:
4d:56:0f:1d:46:1d:7c:78:4e:f8:bf:a9:e0:f4:bf:
7f:0a:47:7e:b2:81:bf:af:1d:2c:74:7c:37:cf:3a:
05:1f:a8:3b:a8:af:72:58:51:ba:65:8f:0b:55:55:
79:55:0e:32:9b:08:d9:e1:dc:17:cc:9f:5b:77:25:
c7:99:8e:4d:d1:85:ab:15:c9:d3:06:5e:67:36:df:
e7:c4:c2:d8:25:e6:81:fc:0b:65:af:7c:8c:c3:d5:
97:70:45:9d:73:6e:8b:06:9f:11:64:b5:e0:0a:fb:
9e:a4:ef:a9:8b:20:09:b4:ab:7a:68:97:2d:8f:04:
5b:08:64:03:76:b0:f4:e2:0b:74:f5:bc:71:23:36:
1d:ed:73:62:3b:8f:ab:c7:63:c3:d0:85:4c:d1:00:
0e:eb:d3:86:c5:3e:de:42:f6:aa:54:0c:84:4e:f2:
8e:a6:f4:c5:74:74:e5:01:31:b4:42:d2:6b:9f:f1:
b4:b4:bd:de:94:15:5f:2c:69:20:7e:0e:66:19:86:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:C8:4F:47:30:81:F4:4F:46:CE:8D:D1:39:66:0A:D2:B9:6F:A0
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:7d:c3:21:78:4c:d6:12:d1:da:72:43:88:3c:02:0e:06:
9a:a2:ae:14:80:02:6a:9c:87:a9:db:18:ba:9e:0b:58:89:cf:
c5:79:1e:38:88:e1:e0:8b:fc:5e:11:be:0f:b4:e4:02:c5:6a:
a8:fb:66:5e:3e:88:51:bc:79:a7:0e:ad:0b:55:3e:19:bf:9e:
63:4e:d4:e7:89:2a:91:9d:26:fa:ca:79:12:a0:b2:9c:f0:ed:
e1:9d:8e:f8:1d:7a:da:55:bb:dc:5a:d0:68:d0:1b:f8:f5:fb:
3c:cc:27:bc:b3:ac:44:0d:9c:86:f7:a6:91:35:2e:9b:ec:8f:
d7:aa:74:64:3f:53:96:ca:fe:be:8f:b8:24:75:19:f4:d3:9b:
e3:c9:98:69:68:1a:87:83:4f:e5:d2:dc:cc:b5:58:62:99:29:
bb:cc:87:3c:76:15:76:66:e3:c2:7a:3b:9a:01:4a:46:d6:b1:
57:42:66:74:46:30:25:bf:d7:17:f7:98:c4:b8:51:bd:b0:39:
ea:36:d5:37:f8:7b:6a:9f:9e:9a:9e:85:f3:d9:bb:90:e5:d6:
00:17:cc:5a:1c:49:49:53:79:37:12:54:dc:3b:fd:f1:1b:ac:
85:b8:7f:82:20:c4:9d:57:cd:a9:22:8e:33:57:13:d2:b5:3d:
73:e9:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:06 2025 by rpki-client